Appl.No. 10/727,332 



Amendments to the Claims; 

This listing of the claims will replace all prior versions, and listings, of claims in the application. 
Listing of Claims: 

1 . (Currently Amended) A method including steps of 
providing a system including a playback device; 

sending [[,]] to a hand h e ld device, via a transport technique not including the playback 
device, a text-based moooogo activation code that includes data from which rights information is 
derivabl e by a verifiable bv the system including a playback dovico, wh e roin th e sending includ e s 
a transport t e chniqu e not including th e playback d e vic e; 

enforcing the rights information on the system in response to the text-based message 
activation code : 

wherein the enforcing includes: 

constructing a license using license parameters available to the plavback system, 
not using the text-based activation code: 

crvptographicallv verifying, at the device, issuance of the license parameters bv a 
trusted license server using at least part of the text-based activation code . 

2. (Previously Presented) A method as in claim 1, including steps of ensuring that 
only authorized content is executed or presented by the playback device or a secure processor, or 
by both in combination or conjunction. 

3. (Currently Amended) A method as in claim 1, including steps of sending content to the 
playback device using a communication link not used by the steps of sending a text-based 
m e ssag e activation code . 

4. (Original) A method as in claim 1, wherein the steps of enforcing are performed at 
least in part by the playback device or a secure processor coupled thereto. 
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5. (Original) A method as in claim 1, wherein the steps of enforcing are performed by 
mandatory security hardware or mandatory security software. 

6. (Currently Amended) A method as in claim 1, wherein the steps of enforcing include 
steps of decrypting at least some information derivable from the text-based m e ssag e activation 
code. 

7. (Currently Amended) A method as in claim 1 , wherein the steps of enforcing includes 
using a key derived from the m e ssag e activation code for decrypting a license or content. 

8. (Currently Amended) A method as in claim 1, wherein the steps of enforcing includes 

putting together at least an identity of the playback device and an identity of content; 

applying at least part of the message, the identity of the playback device, and the identity 
of the content to authenticate the execution rights for the playback device for the content. 

9. (Currently Amended) A method as in claim 1, wherein the steps of enforcing includes 
applying a key derived from the m e ssag e activation code as an authentication code. 

10. (Currently Amended) A method as in claim 1, wherein the m e ssag e activation code is 
composed on an SMS. 

1 1 . (Currently Amended) A method as in claim 1, wherein at least a portion of the m es sag e 
activation code is manually entered into the playback device. 

12. (Currently Amended) A method as in claim 1, wherein at least a portion of the m e ssag e 
activation code is provided to the playback device, wherein the playback device processes the 
portion of the m e ssag e activation code and produces a licensing message suitable to be sent by 
the hand h e ld device, and wherein the licensing message is provided to the hand - held device. 

13. (Currently Amended) A method as in claim 12, wherein the licensing message is 
encrypted or cryptographically authenticated by the hand h e ld device and sent to a license server. 

14. (Currently Amended) A method as in claim 1, wherein the steps of enforcing include 
steps of using a decryption key available to the by th e playback device or a secure processor 
coupled thereto. 
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15. (Currently Amended) A method as in claim 1, wherein said text-based message 
activation code is included in a first message, further comprising: 

sending a second message from the hand h e ld device to a license server; 
sending the first message from the license server to the hand held device, the first 
message including human-readable characters; 

manually entering those characters to an input element coupled to the playback device. 

16. (Original) A method as in claim 1, wherein the system includes a closed content 
distribution system capable of delivering content to the playback device using a second transport 
technique not includmg that used by the steps of sending a text-based message. 

17. (Original) A method as in claim 1, wherein the system includes a closed content 
distribution system capable of ensuring that only authorized content is presented by the playback 
device or executed by the secure processor. 

18. (Currently Amended) A method as in claun 1, wherein the text bas e d m e ssag e includ e s 
an auth e ntication cod e ; and t he system includes a secure processor capable of authenticating 
content coupled to the playback device in response to flirt tiie authentication code. 

19. (Previously Presented) A method as in claim 1, including steps of authenticating 
the rights information by the playback device or a secure processor coupled thereto. 

20. (Currently Amended) A method as in claim 1, further comprising decrypting at least 
some information derivable firom the text-based m e ssag e activation code . 

21. (Previously Presented) A method as in claim 1, further comprising using a 
decryption key available to the playback device or a secure processor coupled thereto to 
authenticate the rights information. 

22. (Canceled) 

23. (Canceled) 

24. (Canceled) 

25. (Currently Amended) A method comprising: 



57I59-8009.USOI/LEGALI3049633.I 



4 



Appl.No. 10/727,332 

providing a text-based activation code of a sufficiently small size that is convenient for a 
human to enter via an SMS technique: 

sending the text-based activation code in a text-based message to a hand-held device 
using an SMS technique, the text-based m e ssag e activation code including information from 
which rights information is d e rivabl e verifiable by a system including a playback device; 

putting together, at the playback device, at least an identity of the playback device and an 
identity of content; 

applying at least part of the message, the identity of the playback device, and the identity 
of the content to authenticate the execution rights for the playback device for the content. 

26. (Currently Amended) A method as in claim 25, wherein the playback device includes at 

least one of rights-enforcing hardware, rights-enforcing software, fijrther including: 

authenticating the rights information using the rights-enforcing hardware or rights- 
enforcing software; 

enforcing the rights information on the system using the rights enforcing hardware or 
rights enforcing software, in response to the text-based m es sag e activation code . 

27. (Currently Amended) A method including steps of 

providing a system including a secure processor and a playback device under control of 
the secure processor; 

sending a text-based message including an activation code to a hand-held device using an 
SMS technique, the t e xt bas e d m e ssag e activation code including information from which rights 
information is d e rivabl e verifiable by a syst e m including a s e cur e proc e osor ond a playback 
d e vic e und e r control of that s e cur e proc e s s or ; 

using the activation code to cryptographically verify rights information: 

authenticating that rights information at the secure processor in response to mandatory 
security software executed by the secure processor; md 
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enforcin g, xisinp the mandatory secwitv software, that tiie rights information on the 
system in response to that text-based message [[.]] ; 

wherein the enforcing includes constructing a license using information available to the 

playback system, not using the activation code . 

28. (Original) A method as in claim 27, including steps of sending content to the 
playback device using a communication link not used by the steps of sending a text-based 

message. 

29. (Original) A method as in claim 27, wherein the steps of sending a text-based 
message include a transport technique not including the playback device. 

30. (Original) A method as in claim 27, wherein the steps of sending a text-based 
message include steps of 

sending a first message from a hand-held device using an SMS technique to a license 

server; 

sending a second message from the license server to the hand-held device, the second 
message including human-readable characters; and 

entering those characters to an input element coupled to the secure processor. 

31. (Original) A method as in claim 27, wherein the system includes a closed content 
distribution system capable of delivering content to the playback device using a second transport 
technique not including that used by the steps of sending a text-based message, the closed 
content distribution system including the mandatory security software being responsive to a 
private key in a public-key cryptosystem. 

32. (Original) A method as in claim 27, wherein the system includes a closed content 
distribution system capable of ensuring that only authorized content is presented by the playback 
device or executed by the seciire processor. 

33. (Currently Amended) A method as in claim 27, wherein 
the text-based message includes an authentication code; and 
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the system includes a secure processor capable of authenticating content coupled to the 
playback device in response to that authentication the activation code. 

34. (Currently Amended) A method comprising 

providing a system including a playback device under control of a secure processor: 

sending to a hand-held device using an SMS technique a signature over a token including 
a playback device identity and content identity; 

providing the signature to the playback device identified in the token; 

enforcing, using security software at the playback device, a check against the playback 
device and the content identified in the token; 

wherein the enforcing includes constructing a license using information available to the 
plavback system, not using the signature . 

35. (Currently Amended) A method comprising 

providing a system including a playback device under control of a secure processor; 

sending a text-based message including an activation code to a hand-held device using an 
SMS technique, the t e xt bas e d m e ssag e activation code including information from which rights 
information is d e rivabl e verifiable by [[a]] ^ system including a playback d e vic e und e r control 
of a gecuro prooesaor ; aad 

providing a signature associated with the t e xt - based m e ssage activation code to the secure 
processor; 

enforcing the rights information at the secure processor using the signature and an 

identity of the playback device [[.]] ; 

wherein the enforcing includes constructing a license using information available to the 
svstem. not using the activation code . 

36. (Currentiy Amended) A method comprising: 
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providing, in a closed content distribution system, an SMS text messe^e that includes 
license information in the form of an activation code that is small enough for a human to 
conveniently enter , the closed content distribution system including a playback device and a 
secure processor, wherein the SMS message is sent via a communication link not including the 
playback device or secure processor; 

constructing, at the playback device, license parameters of poosiblo oxooution righto 
including a device ID. a content ID. and a rights code identified by the activation code ; 

using at least part of the SMS text message as a signature to authenticate the constructed 
license parameters; 

e nsuring that only authorized allowing content identified by the content ID to be is 
executed or presented by the playback device or the secure processor, or by both in combination 
or conjunction in accordance with the constructed and authenticated license p arameters ef 
possible exeoution right s , wherein the playback device or the secure processor, or both in 
combination or conjunction, are associated with the device ID : 

ensuring that rights information associated with the rights code d e rivabl e from the lioenso 
information is enforced by the playback device or the secure processor, or by both in combination 
or conjunction. 

37. (Original) A method as in claim 36, including steps of authenticating the license 
information by the playback device or the secure processor, or by both in combination or 
conjunction. 

38. (Original) A method as in claim 36, including steps of determining in response to the 
rights information whether the user is authorized to execute or present the selected content. 

39. (Original) A method as in claim 36, including steps of encoding the license 
information using a digital signature, secure hash, or shared secret; and 
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authenticating the license inforaiation by the playback device or the secure processor, or 
by both in combination or conjunction, in response to the digital signature, secure hash, or shared 
secret. 

40. (Original) A method as in claim 36, including steps of receiving content at the 
playback device. 

41. (Original) A method as in claim 36, wherein at least a portion of the content is 4S 
included on physical media transported to the playback device or secure processor. 

42. (Original) A method as in claim 36, wherein at least a portion of the content is 
present at the playback device or secure processor before the steps of delivering license 
information. 

43. (Original) A method as in claim 36, wherein the communication link includes a 
cellular telephone. 

44. (Original) A method as in claim 36, wherein the content can be executed or 
interpreted by the playback device or the secure processor, or by both in combination or 
conjunction. 

45. (Original) A method as in claim 36, wherein the content can be presented in a 
human-sensible form by the playback device or the secure processor, or by both in combination 

or conjunction. 

46. (Original) A method as in claim 36, wherein the secure processor includes a 
computing device capable of enforcing mandatory execution of selected security software. 

47. (Original) A method as in claim 36, wherein the secure processor includes a 14 
computing device capable of general purpose processing. 

48. (Previously Presented) A method as in claim 36, wherein the steps of providing 
include steps of sending a text-based message to a hand-held device using an SMS technique, the 
text-based message including information from which rights information is derivable. 

49. (Original) A method as in claim 36, wherein the steps of ensuring include steps of 
decoding the license information; 
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generating at least a portion of the rights information in response to the steps of decoding; 

and 

enforcing the rights information. 

50. (Previously Presented) A method as in claim 36, including steps of performing a 
commercial transaction concurrently with communication between a license server and a user. 

51. (Original) A method as in claim 50, wherein the steps of performing a commercial 
transaction include steps of receiving information at the license server sufficient to allow that 
license server to effect a purchase transaction by the user. 

52. (Original) A method as in claim 50, wherein the steps of performing a commercial 
transaction include steps of receiving proof of purchase at the license server of a license by the 
user. 

53 . (Original) A method as in claim 36, including steps of performing mandatory security 

software by the secure processor. 

54. (Original) A method as in claim 53, wherein the steps of performing mandatory 
security software include one or more of: 

authenticating at least one of: a specific content element, a specific playback device or 
secure processor, a specific user; 

enforcing comparison of an identity associated with the playback device with a tamper- 
proof identity available to the playback device or the secure processor, or to both in combination 

or conjunction; 

enforcing comparison of rights information with an identity of selected content available 
to the playback-device or the secure processor, or to both in combination or conjunction; 

enforcing computation of the secret key (using its private key and server public key) and 

decryption of the identities; and 

enforcing verification of a signature by the Ucense server. 
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55. (Currently Amended) A method as in claim 36, wherein the steps of providing include 
steps of delivering [[a]] the activation code from a license server to a user; and 

manually conmiunicating the activation code from the user to the playback device or the 

secure processor. 

56. (Currently Amended) A method as in claim 55, including steps of deriving license 
information from the activation code. 

57. (Currently Amended) A method as in claim 55, including steps of decrypting content in 
response to the activation code. 

58. (Currently Amended) A method as in claim 55, wherein the activation code includes a 
human-readable alphabetic, alphanumeric, numeric, or other character string. 

59. (Currently Amended) A method as in claim 55, wherein the activation code includes a 
representation of at least a portion of a license message. 

60. (Currently Amended) A method as in claim 55, wherein the steps of communicating the 
activation code include a human input device. 

61. (Currently Amended) A method as in claim 55, wherein the steps of communicating the 
activation code include an input technique not part of the closed distribution system. 

62. (Currently Amended) A method as in claim 55, wherein the steps of commimicating the 
activation code include an SMS protocol. 

63. (Currently Amended) A method as in claim 55, wherein the steps of conununicating the 
activation code include a text messaging protocol. 

64. (Currently Amended) A method as in claim 55, wherein the activation code includes a 
representation of a content decryption key. 

65. (Original) A method as in claim 64, wherein the closed distribution system includes a 
public-key cryptosystera; and 

the content decryption key includes a decryption key privately associated with the 
content, encrypted by an encryption key publicly associated with a specific playback device. 
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66. (Canceled) 

67. (Canceled) 

68. (Canceled) 

69. (Currently Amended) A system comprising: 

a closed content distribution system including a playback device and a secure processor; 

a communication link not including the playback device or secure processor; 

a license server capable of being coupled to the communication link; 

wherein the playback device or the secure processor, or both in combination or 
conjunction, includes mandatory security software that is oonfigurod to construot param e ters of 
e x e cution rights, and to us e at l e ast part of th e t e xt m e ssage os a signatur e to authenticat e th e 
oonstruotod poram e t e rs of ex e cution right s capable of verifying rights information associated 
with a license from a text-based activation code received on the communication link, wherein 
license parameters of the license do not include the text-based activation code . 

70. (Original) Apparatus as in claim 69, wherein at least a portion of the content is 
included on physical media transported to the playback device or secure processor. 

71. (Original) Apparatus as in claim 69, wherein the conununication link includes a 
cellular telephone. 

72. (Original) Apparatus as in claim 69, wherein the mandatory security software 
includes instructions authenticating the license information. 

73. (Original) Apparatus as in claim 69, wherein the mandatory security software 
includes instructions determining in response to the rights information whether the user is 
authorized to execute or present the selected content. 

74. (Currently Amended) Apparatus as in claim 69, wherein the mandatory security software 
34-includes instructions of 
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encoding the license information using a digital signature, secure hash, or shared secret; 

and 

authenticating the license information by the playback device or the secure processor, or 
by both in combination or conjunction, in response to the digital signature, secure hash, or shared 
secret. 

75. (Original) Apparatus as in claim 69, wherein 

the mandatory security software includes instructions ensuring that only authorized 
content is executed or presented by playback device or the secure processor, or both in 
combination or conjunction; and 

rights information derivable from the license information is enforced by the playback 
device or the secure processor, or by both in combination or conjunction. 

76. (Original) Apparatus as in claim 69, wherein the mandatory security software 
includes one or more of: 

instructions authenticating at least one of: a specific content element, a specific playback 
device or secure processor, and a specific user; 

instructions enforcing comparison of an identity associated with the playback device with 
a tamper-proof identity available to the playback device or the secure processor, or to both in 
combination or conjunction; 

instructions enforcing comparison of rights information with an identity of selected 
content available to the playback device or the secure processor, or to both in combination or 
conjunction; 

instructions enforcing computation of the secret key (using its private key and server 
public key) and decryption of the identities; and 

instructions enforcing verification of a signature by the license server. 
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77. (Original) Apparatus as in claim 69, wherein the secure processor includes a 
computing device capable of general piirpose processing. 

78. (Original) Apparatus as in claim 69, including a code delivered from a license server 
to a user, the code being communicated from the user to the playback device or the secure 
processor, 

79. (Original) Apparatus as in claim 78, including a content decryption key embedded in 
the code. 

80. (Original) Apparatus as in claim 78, including a human input device coupled to the 
playback device or the secure processor. 

81. (Original) Apparatus as in claim 78, including license information embedded in the 
code. 

82. (Original) Apparatus as in claim 78, including an SMS protocol message. 

83. (Original) Apparatus as in claim 78, including a text messaging protocol message. 

84. (Original) Apparatus as in claim 78, wherein the code includes a human-readable 
alphabetic, alphanumeric, numeric, or other character string. 

85. (Canceled) 

86. (Original) Apparatus as in claim 78, wherein the code includes a representation of a 
content decryption key. 

87. (Original) Apparatus as in claim 86, wherein 

the closed distribution system includes a public-key ciyptosystem; and 

the content decryption key includes a decryption key privately associated with the 
content, encrypted by an encryption key publicly associated with a specific playback device. 

88. (Canceled) 

89. (Currently Amended) Apparatus as in claim 8« 69, wherein the mandatory security 
software includes instructions authenticating the code, the instructions including one or more of: 

instructions determining if the code is digitally signed by a license server; and 
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instructions determining if the code is encrypted by a key known conunoniy to both the 
license server and the specific user. 

90. (Currently Amended) Apparatus as in claim M 69, wherein the mandatory security 
software includes instructions authenticating the code, the instructions including one or more of: 

instructions determining if the code is digitally signed by a license server; and 

instructions determining if the code is encrypted by a key known commonly to both the 
license server and the specific playback device or secure processor, or both in combination or 
conjunction. 

91 . (New) A method as in claim 1 , further comprising: 

constructing parameters of execution rights for the hand-held device or the content; 
providing a system including a playback device; 

sending to the playback device, via a transport technique not including the playback 
device, a text-based message associated with an SMS technique; 

enforcing, using mandatory security hardware or mandatory security software, the rights 
information on the system in response to the text-based message, said enforcing including: 

constructing parameters of execution rights for the playback device; 

using at least part of the text-based message as a signature to authenticate the 
execution rights. 

92. (New) A method as in claim 1, wherein the cryptographically verifying includes using at 
least part of the activation code as a cryptographic signature generated using a private key of a 
public key cryptographic key pair. 

93. (New) A method as in claim 1, wherein the cryptographically verifying includes 
computing a cryptographic signature using a computed shared secret key to construct a message 
authentication code (MAC). 
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94. (New) A method as in claim 1, wherein the cryptographically verifying includes 
decrypting the activation code using a computed shared secret key and matching the decrypted 
activation code against the license parameters. 

95. (New) A method as in claim 1, wherein one or more of the license parameters are 
selected from the group consisting of: a device identity, a content identity, and a rights code. 

96. (New) A method as in claim 27, further comprising using at least part of the activation 
code as a cryptographic signature generated using a private key of a public key cryptographic key 
pair. 

97. (New) A method as in claim 27, further comprising: 

using at least part of the activation code as an encrypted message from a license server; 
decrypting said encrypted message using a shared secret key computed by the playback 

device; 

verifying that the decrypted message verifies against said constructed license. 
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